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AMENDMENTS TO THE CLAIMS 
Please amend the claims as indicated hereafter. 

1. S (Previously Presented) A method of delivering a digital document to an intended 
rec|pient at a printout station, the method comprising: 

receiving and securely retaining a transmitted document at the printout station; 
receiving an independently verifiable data record of the intended recipient at the 
itout station; 

obtaining a first token of the intended recipient; 

requesting proof of the intended recipient's identity at the printout station using 
dala in the independently verifiable data record of the intended recipient; and 

releasing the document when the intended recipient has proved their identity by 
ust of a second token that is uniquely related to the fbr$t token, wherein the retaining step 
comprises printing out the document as received and placing it in a locked compartment 
and the releasing step comprises a controller unlocking the compartment where the 
printed copy of the document is stored. 
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(Original) A method according to Claim 1, wherein the transmitted document is a 
document and the printout station comprises a fax machine. 



3-t . (Canceled) 

7. J (Original) A method according to Claim 1, wherein the requesting step comprises 
lesting supply of data encoded with the second token which can be decoded with the 

firlt token. 

8. (Original) A method according to Claim 1, wherein the releasing step is carried 
ou when the intended recipient has presented a portable data carrier holding the second 
to! en to the printout station and has transferred data to prove their identity. 
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(Original) A method according to Claim 8, wherein the releasing step further 
comprises the intended recipient entering a verifiable security identifier into the printout 
sta ion to establish that they are the legitimate owner of the portable data carrier. 

10 (Original) A method according to Claim 8, wherein the portable data carrier is a 
sm art card and the printout station comprises a smart card reader. 

11 (Previously Presented) A method according to Claim 1, wherein the obtaining 
ste :> comprises extracting the first token transmitted with the data record, 

121 (Original) A method according to Claim 11, wherein the intended recipient's 
independently verifiable data record is provided as an intended recipient's digital 
cei tificate. 



131 (Original) A method according to Claim 1, further comprising carrying out an on- 
linfe check of the validity of the intended recipient's independently verifiable data record. 

14 (Original) A method according to Claim 1, further comprising instructing a third 
pai ty to cany out an on-line check of the validity of the intended recipient's independently 
ve: ifiable data record. 

15 (Original) A method according to Claim 13, wherein the releasing step further 
co: nprises only releasing title document if the validity of the independently verifiable data 
ret ord has been confirmed as a result of the check. 

16 (Original) A method according to Claim 14, wherein the releasing step further 
co; nprises only releasing the document if the validity of the independently verifiable data 
rec ord has been confirmed as a result of the check. 

17 (Previously Presented) A method according to Claim 1 ? wherein the first and 
sec ond tokens comprise public and private encryption/decryption keys, respectively, of 
thJ intended recipient. 



4/5/2006 12:39:01 PM [Eastern Daylight Time] ^ SVR:USPT0-EFXRF-1/1 ^ DNIS:2738300 ^ CSID:7709510933 ^ DURATION (mm-ss):06-S4 



94/05/2006- 12:44 7709510933 



THOMAS » KAYDEN 



PAGE 05 



Serial No.: 09/918,188 
Art Unit 2137 



18|20. (Canceled) 



21 J (Currently Amended) A method of delivering a digital document to ah a group of 
intpded recipient recipients at a printout station, the method comprising: 

obtaining a first token of each intended recipient that belong to the group of 
intended recipients : 

encoding the digital document with a session key using a symmetric cryptographic 
encryption algorithm, and encrypting the session key with the first token using an 
encryption algorithm that is more computationally intensive than the symmetric 
[tographic encryption algorithm; 

receiving and securely retaining the digital document, the encrypted session key 
ani an independently verifiable data record of each intended recipient at a printout 
stafion; 

requesting proof of each intended recipient's identity at the printout station using 
l in the independently verifiable data record of the intended recipient; 

receiving proof of each intended recipient's identity in the form of a second token 
jjquely related to the first token; and 

decrypting the encrypted session key with the second token, decoding the digital 
document with the decrypted session key, and releasing the document, wherein: 

the receiving step comprises receiving a plurality of transmitted independently 
verifiable data records of the intended recipients at the printout station; 

the obtaining step comprises obtaining the first tokens of each of the intended 
rec ipients in the group of intended recipients ; 

I the requesting step comprises requesting proof of each of the intended recipients* 
identities at the printout station using data in the independently verifiable data records of 
tha intended recipients; and 

the processing step comprises processing each of the intended recipients' response 
to the request and releasing the document when all of the intended recipients have proved 
their identity by use of respective second tokens that are each uniquely related to 
res aective ones of the first tokens. 
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22 J (Original) A method according to Claim 21, wherein the transmitted document is 
a i&x document and the printout station comprises a fax machine. 
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24. (Canceled) 



(Original) A method according to Claim 21, wherein the retaining step comprises 
stc ring the received document in memory without printing out a copy of it on receipt. 

26 (Original) A method according to Claim 25, wherein the releasing step comprises 
pri iting out a copy of it. 

27 (Original) A method according to Claim 21, wherein the requesting step 
co] nprises requesting supply of data encoded with the second token which can be decoded 



wi 



28 



h the first token. 



(Previously Presented) A method according to Claim 21 wherein the releasing 
steb is carried out when each intended recipient has presented a portable data carrier 
ho ding the second token to the printout station and has transferred data to prove their 
ide ntity. 

29 (Previously Presented) A method according to Claim 28, wherein the releasing 
ste ? further comprises each intended recipient entering a verifiable security identifier into 
the] printout station to establish that they are the legitimate owner of the portable data 



caj ner 



30 



(Original) A method according to Claim 28, wherein the portable data carrier is a 
sm art card and the printout station comprises a smart card reader. 

31 (Original) A method according to Claim 21, wherein the obtaining step comprises 
extracting the first token transmitted with the document and the data record. 

32 (Previously Presented) A method according to Claim 31, wherein each intended 
recipient's independently verifiable data record is provided as an intended recipient's 
dif ital certificate. 



5 
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338 (Previously Presented) A method according to Claim 21, further comprising 
carrying out an on-line check of the validity of each intended recipient's independently 
verifiable data record. 

34j (Previously Presented) A method according to Claim 21, further comprising 
instructing a third party to cany out an on-line check of the validity of each intended 
recipient's independently verifiable data record. 

35, (Previously Presented) A method of according to Claim 33, wherein the releasing 
ste 3 further comprises only releasing the document if the validity of each independently 
ve] ifiable data record has been confirmed as a result of the check. 

36 (Previously Presented) A method according to Claim 34, wherein the releasing 
ste 3 further comprises only releasing the document if the validity of each independently 
vea ifiable data record has been confirmed as a result of the check. 

37j (Previously Presented) A method according to Claim 21, wherein the first and 
id tokens comprise private and public encryption/decryption keys of the intended 
recipient. 




38 



39; 



or 



(Canceled) 



(Previously Presented) A method according to Claim 21, wherein the transmitted 
document or a session encryption/decryption key of the transmitted document has been 
tially encrypted with each of the first tokens of the intended recipients in a given 
and the processing step comprises sequentially decrypting the transmitted document 
a session encryption/decryption key with each of the second tokens of the intended 
rec ipients in the reverse of the given sequential order. 
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40S (Previously Presented) A method of delivering a digital document to intended 
retjjipients at a printout station, the method comprising: 

receiving and securely retaining a transmitted document at the printout station; 
receiving a plurality of independently verifiable data records of the intended 
recipients at the printout station; 

obtaining first tokens of each of the intended recipients; 

requesting proof of each of the intended recipient's identities at the printout station 
g data in the independently verifiable data records of the intended recipients; and 
processing each of the intended recipients* responses to the request for proof and 
relfeasing the document when all of the intended recipients have proved their identity by 
usi ; of respective record tokens that are each uniquely related to respective-ones of the 
fir: t tokens, 

41 1 (Previously Presented) A device for delivering a digital document to an intended 
bpient, the device comprising: 

a communications module for receiving an electronic version of the transmitted 
document over a communications network, receiving an independently verifiable data 
rec ord of the intended recipient, and receiving a first token of the intended recipient; 

a store for securely retaining the transmitted document, the transmitted 
inc ependently verifiable data record and the first token; 

an instruction module for requesting proof of the intended recipient's identity 
usi Qg data provided in the intended recipient's data record; 

a controller for releasing the document when the intended recipient has proved 
identity by use of a second token that is uniquely related to the first token; 

a portable data carrier reader for receiving information from a portable data carrier 
stcjring the intended recipient's second token; and 

one or more lockable compartments and the device is arranged to print out the 
document as received and place it in one of the compartments, wherein the controller is 
arr mged to release the locked compartment containing the document, once the intended 
rec ipient has proved their identity. 



42 



(Original) A device according to Claim 41, wherein the device comprises a fax 



mafchine. 
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(Previously Presented) A device according to Claim 41, wherein the first and 
se|ond tokens comprise public and private encryption/decryption keys of the intended 
ipient, 

44|47. (Canceled) 

48 (Original) A device according to Claim 41, wherein the controller is arranged to 
relsase the received document when the intended recipient has entered a verifiable 
se< urity identifier into the printout station to establish that they are the legitimate owner of 
thfj portable data carrier- 

49 (Previously Presented) A device for delivering a digital document to an intended 
recipient, the device comprising: 

a communications module for receiving an electronic version of the transmitted 
document over a communications network, receiving an independently verifiable data 
rec ord of the intended recipient, and receiving a first token of the intended recipient; 

a store for securely retaining the transmitted document, the transmitted 
independently verifiable data record and the first token; 

an instruction module for requesting proof of the intended recipient's identity 
us|ig data provided in the intended recipient's data record; 

a controller for releasing the document when the intended recipient has proved 
thejjir identity by use of a second token that is uniquely related to the first token; and 

one or more lockable compartments and the device is arranged to print out the 
document as received and place it in one of the compartments, wherein the controller is 
iged to release the locked compartment containing the document, once the intended 
jipient has proved their identity . 

50 (Canceled) 

51 (Original) A device according to Claim 49, wherein the device comprises a fax 
machine. 
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(Previously Presented) A device according to Claim 49, wherein the first and 
tokens comprise public and private encryption/decryption keys of the intended 



rec ipient. 

53| (Original) A device according to Claim 49, wherein the controller is arranged to 
relfease the received document when the intended recipient has entered a verifiable 
sedulity identifier into the printout station to establish that they are the legitimate owner of 
a dortable data carrier. 

54 S (Currently Amended) A method of delivering a digital document from a first 
ion via a communications network to an intended recipient at a second station, the 
method comprising: 

obtaining details of the intended recipient, including an independently verifiable 
da|a. record of the intended recipient at the first station; 

determining prior to transmission of the document whether the second station is 
onjk which is arranged to implement tho prosont m e thod stop a transmitted document from 
being released until the intended recipient has proved their identity, wherein the first 
sta tion is configured to alternatively transmit the document as a non-encrvpted 
tra nsmission when the second station is determined to not be capable of stopping a 
trahsmitted document from being released until the intended recipient has moved their 
idcfntitv : 

transmitting the document to the second station prior to receiving proof of an 
intended recipient's identity : 

transmitting the independently verifiable data record of the intended recipient to 
th^ second station; 

receiving and securely retaining the transmitted document at the second station 
pribr to receiving proof of the intended recipient's identity and receiving the data record at 



thej second station; 

obtaining a first paj* identifying token of an intended recipient's id e ntifying token 
rec ipient at the second station; 



requesting proof of the intended recipient's identity at the second station using the 
transmitted independently verifiable data record; and 
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releasing the document to the intended recipient when the intended recipient has 
prAved their identity using a second port of tho r e cipi e nt's identifying token identifying 
to] en related to the first identifying token . 



(Original) A method according to Claim 54, further comprising obtaining details 
of the intended recipient including the independently verifiable data record prior to 
tra ismitting the document. 

561 (Original) A method according to Claim 55, wherein the step of obtaining details 
cofnprises obtaining the independently verifiable data record from a central database 
stdring many possible intended recipients 1 details. 



57J (Currently Amended) A method according to Claims Claim 54, wherein the 
intended recipient's independently verifiable data record is provided in an intended 
recipient's digital certificate. 

(Previously Presented) A method according to Claim 54, further comprising 
enioding the document prior to transmitting it to the second station and decoding the 
rec eived document once the intended recipient has proved their identity. 

59 (Original) A method according to Claim 58, wherein the encoding/decoding steps 
coi nprise using enveloping encryption/decryption techniques. 

60 62. (Canceled) 

63. (Currently Amended) A method according to Claim 6© 54, wherein the intended 
rec ipient's independently verifiable data record is provided in an intended recipient's digital 
cei tificate. 

64J65. (Canceled) 
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